CVE-2026-96540

HIGHCVSS 8.8

Description

An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.

Timeline

Published:October 14th, 2026 9:17 PM

Last modified:October 15th, 2026 8:38 PM

CVSS Scoring

CVSS v3: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-863

References & Reports

Advisories, patches, and third-party reports

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018

Source: NIST NVD · Data may lag official sources by up to one minute